FortiManager and FortiAnalyzer code injection lets admins run commands
FG-IR-26-230 scores CVSS 7.2 and also covers both products’ cloud editions; no fix is stated.
Stories per day · 30 days
2 RSS
Relatedcode-execution1code-injection1command-execution1fortianalyzer1fortimanager1fortinet1input-validation1okta1okta-access-gateway1omni-completion1oss-security1ruby1vim1
4 stories, newest first · one card per story
Stories tagged #cwe-94
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 scores 9.1 but needs Admin Console access; Okta reports no active exploitation and no workaround.
1
[vim-security] Arbitrary Code Execution via Ruby Omni-Completion in Vim < 9.2.1177
Vim before 9.2.1177 allows arbitrary code execution through Ruby omni-completion; no CVE yet.
Emerging Threat: (CVE-2026-60004) Gitea Remote Code Execution via ...
CVE-2026-60004 (CVSS 9.8) lets attackers with repository write access achieve RCE on self-hosted Gitea servers via malicious git hooks; fixed in 1.27.1.
15